All CVEs — page 3 of 42

The complete archive, 25 per page, newest first. 1030 records. Search instead.

• HIGH 8.8CVE-2026-944252026-09-21

  The vulnerability in Moore Threads MTT S80 Driver Package 340.150 allows local attackers to exploit improper privilege management, leading to potential high impact on system integrity and availability.

• HIGH 7.5CVE-2026-94627public exploit available2026-09-21

  The flaw allows attackers to trigger GPU memory exhaustion by submitting multiple completion requests, leading to orphaned KV cache blocks and preventing legitimate requests from executing.

• HIGH 7.5CVE-2026-94626public exploit available2026-09-21

  The flaw allows attackers to allocate unbounded memory by supplying arbitrary tp_size values, potentially leading to a denial of service via kernel OOM-kill.

• MEDIUM 5.3CVE-2026-94625public exploit available2026-09-21

  The vulnerability allows attackers to send rejected prefill requests that create ownerless transfer placeholders, leading to resource exhaustion and delayed processing of valid requests.

• HIGH 7.5CVE-2026-94624public exploit available2026-09-21

  The vulnerability allows attackers to create unreachable peer sessions that exhaust ZeroMQ socket quotas, leading to EngineCore crashes and service disruptions.

• HIGH 7.5CVE-2026-94623public exploit available2026-09-21

  The flaw allows attackers to trigger an assertion failure in vLLM's NIXL connector by submitting multi-prompt completion requests, leading to service disruption.

• HIGH 7.5CVE-2026-94622public exploit available2026-09-21

  The flaw allows attackers to cause a denial of service by sending requests with incomplete metadata entries, leading to engine termination and failure of routed requests.

• HIGH 7.7CVE-2026-94540public exploit available2026-09-21

  DesktopSMS 1.11.0 allows local attackers to transmit and retrieve SMS content without user interaction due to an unauthorized access vulnerability.

• MEDIUM 4.3CVE-2026-94536public exploit available2026-09-21

  The flaw allows authenticated users to read any employee's roles and permissions by exploiting the unvalidated employeeId parameter, posing a security risk.

• HIGH 7.1CVE-2026-94535public exploit available2026-09-21

  The vulnerability allows authenticated users to delete other users' notifications without proper validation, enabling unauthorized data modification.

• HIGH 7.1CVE-2026-94534public exploit available2026-09-21

  The flaw allows authenticated attackers to modify any user's profile fields, including nicknames and avatars, by exploiting PUT requests to specific endpoints.

• MEDIUM 6.5CVE-2026-94533public exploit available2026-09-21

  This vulnerability allows authenticated users to download any file stored by other users due to a lack of proper file ownership validation, enabling unauthorized access to sensitive information.

• MEDIUM 6.5CVE-2026-94532public exploit available2026-09-21

  The flaw allows authenticated users to read other users' full profiles, including sensitive information like mobile numbers and national identity card numbers.

• MEDIUM 6.8CVE-2026-93340public exploit available2026-09-21

  The flaw allows unauthenticated attackers to exploit a password reset link poisoning vulnerability by manipulating the client-supplied origin parameter, leading to potential full account takeover.

• UNSCOREDCVE-2026-88756public exploit available2026-09-21
• UNSCOREDCVE-2026-887382026-09-21
• UNSCOREDCVE-2026-79079public exploit available2026-09-21
• UNSCOREDCVE-2026-78847public exploit available2026-09-21
• UNSCOREDCVE-2026-78806public exploit available2026-09-21
• UNSCOREDCVE-2026-65980public exploit available2026-09-21
• UNSCOREDCVE-2026-61852public exploit available2026-09-21
• UNSCOREDCVE-2026-61851public exploit available2026-09-21
• MEDIUM 6.3CVE-2026-61743public exploit available2026-09-21
• UNSCOREDCVE-2026-61652public exploit available2026-09-21
• UNSCOREDCVE-2026-61541public exploit available2026-09-21